OneHAIT

Privacy Policy

Version 1.0 · Effective September 2026

1. WHO WE ARE

OneHAIT (the "Platform") is operated by Edifice Information Ventures, LLC, a limited liability company organized under the laws of the State of Wyoming, United States of America, doing business as EIVENX ("EIVENX", "we"). Address: 30 N Gould St, Ste N, Sheridan, WY 82801, USA. Contact: [email protected] · +1 (307) 667-7832.

Educational institutions, academies and instructors (the "Institutions") use the Platform to deliver their courses to their students. With respect to the personal data of students, the Institution decides why and how the data is used, and EIVENX processes it on the Institution's behalf as technical processor. With respect to account and security data needed to operate the Platform itself, EIVENX acts on its own behalf.

2. DATA WE COLLECT

  1. Account data: name, email address, password (stored only as a secure hash), language preference and, where provided, telephone number and profile photo.
  2. Data received from Google Sign-In: if you choose to sign in with Google, we receive your name, email address and profile picture from your Google account. We do not receive your Google password and we do not access your Gmail, Drive, Calendar, contacts or any other Google service.
  3. Educational data: the courses you are enrolled in, your progress, submissions, assessments and messages exchanged within the Platform.
  4. Connection and device data: IP address, approximate location derived from it, and technical characteristics of your computer and of the environment in which the application runs, to the extent necessary to protect content.
  5. Security events: activity that the protection system considers suspicious, with its date, time and context, as described in the Monitoring and Content Protection Policy.
  6. Legal acceptances: the date, time, IP address, device and version of each document you accept.

3. HOW WE USE THE DATA

We use the data only to: create and maintain your account and sign you in; deliver the courses your Institution has enabled for you; protect content against capture and redistribution; detect unauthorized access to your account; send you service emails (account verification, password recovery and notices about your courses); comply with legal obligations; and produce evidence in the event of an infringement of intellectual property.

We do not sell personal data, we do not use it for advertising and we do not use data received from Google for any purpose other than signing you in and identifying your account. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. WHO RECEIVES THE DATA

  1. Your Institution, with respect to its own students: enrollment, progress, assessments and security events.
  2. Technology providers that operate the Platform on our behalf, under confidentiality and data protection obligations: database and authentication hosting, video delivery, file storage and transactional email.
  3. Authorities that validly request it under applicable law.
  4. Legal advisers of EIVENX or of the Institution in connection with an action for infringement of intellectual property.

5. INTERNATIONAL TRANSFERS

Data may be stored and processed in the United States of America, in Brazil and in other countries where our technology providers operate, subject to appropriate contractual safeguards.

6. RETENTION

Account and educational data are kept while your account is active and for the period required by your Institution or by law. Security information is kept for up to five (5) years from the time it is generated, or longer if required by a court order or an ongoing investigation. After those periods the data is deleted or anonymized.

7. SECURITY

We apply reasonable technical and organizational measures to protect personal data, including encryption in transit, encryption of the session stored on your computer, role-based access control and audit logs.

8. YOUR RIGHTS

Subject to applicable law, you may request access to, correction of and deletion of your personal data, object to its processing on legitimate grounds and withdraw your consent. These rights may be limited where the data is necessary to comply with legal obligations, to preserve evidence for ongoing or foreseeable proceedings, or to prevent fraud or piracy.

To exercise them, write to [email protected] or contact your Institution. If you signed in with Google, you can also revoke the Platform's access at any time from your Google Account settings.

9. CHILDREN

The Platform is intended for users who are at least 18 years of age. Minors may use it only with the authorization of their parents or guardians and to the extent permitted by their Institution.

10. CHANGES

We may update this Policy. The current version and its effective date appear at the top of this page. Material changes will be notified through the Platform.

11. RELATED DOCUMENTS

This Policy should be read together with the Platform Terms of Use and the Monitoring and Content Protection Policy, available on this website.